$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b42cd78d-c3f1-471a-931a-26eaf5a872f3/1652fdb9-05d0-3c4c-a3f6-1debfcfb924e.roa File: 1652fdb9-05d0-3c4c-a3f6-1debfcfb924e.roa (raw, json) Hash identifier: +24AcVJBiOBEUcFjhNvuJOLKWKqDkrs8q/xEC/qyt64= Subject key identifier: 0C:C6:0C:EC:F1:6D:17:8E:E2:07:85:D3:24:31:E1:37:40:3E:BC:33 Certificate issuer: /CN=b42cd78d-c3f1-471a-931a-26eaf5a872f3 Certificate serial: 010D0C9F4328584875F0540487B3E43E284DDA00 Authority key identifier: 0A:F3:1E:F6:71:CB:5B:F5:26:03:2D:37:EE:66:DD:C8:8B:6D:54:DF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b42cd78d-c3f1-471a-931a-26eaf5a872f3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b42cd78d-c3f1-471a-931a-26eaf5a872f3/1652fdb9-05d0-3c4c-a3f6-1debfcfb924e.roa Signing time: Tue 07 Jan 2025 02:00:39 +0000 ROA not before: Tue 07 Jan 2025 02:00:39 +0000 ROA not after: Mon 07 Apr 2025 01:00:39 +0000 asID: 53727 IP address blocks: 23.172.56.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b42cd78d-c3f1-471a-931a-26eaf5a872f3/b42cd78d-c3f1-471a-931a-26eaf5a872f3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b42cd78d-c3f1-471a-931a-26eaf5a872f3/b42cd78d-c3f1-471a-931a-26eaf5a872f3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b42cd78d-c3f1-471a-931a-26eaf5a872f3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:75:f0:54:04:87:b3:e4:3e:28:4d:da:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b42cd78d-c3f1-471a-931a-26eaf5a872f3 Validity Not Before: Jan 7 02:00:39 2025 GMT Not After : Apr 7 01:00:39 2025 GMT Subject: CN=7d538c54-8f4e-4231-a2b5-011df189e6d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:c1:5d:c5:e0:dd:6c:09:d5:e2:2f:09:77:bd: 1f:9e:a8:ec:48:fb:cf:b8:8a:4a:f8:70:f5:aa:7b: 1e:0a:72:f9:6d:ff:b2:c2:68:d3:07:30:0d:f8:61: 79:e8:ce:bd:a1:8d:9e:ba:3e:76:5e:18:fc:43:ea: 20:24:8c:19:85:eb:9a:fb:cf:74:df:6f:2c:b1:05: ac:b1:ec:42:1c:24:92:36:05:ed:37:6c:48:e9:6e: a9:d8:27:03:ab:c8:2c:b7:85:8f:bc:09:d0:9c:56: 3e:74:57:0d:ad:8e:ba:b0:85:76:08:d7:77:64:c8: ad:e7:9a:51:b2:78:86:c1:7f:15:c0:84:bb:fb:9f: 7a:e9:45:37:1c:75:23:47:0a:2a:79:91:a1:a1:7c: c8:0f:47:53:2b:2d:2c:6a:4e:e4:00:65:4d:b1:1e: 36:48:c6:aa:57:be:51:af:f2:a1:e1:63:71:66:ce: af:33:46:25:a0:0c:1a:17:72:21:a1:ab:b3:da:03: 85:56:4e:0b:f9:ec:2e:81:c8:ab:97:81:62:d3:6b: 3e:46:b0:50:26:8d:d9:1c:d1:db:52:42:b6:31:42: 65:66:56:93:93:28:01:fe:e2:91:58:11:9c:09:a6: 90:c0:8e:85:c8:7c:5d:c7:f3:b5:95:84:21:19:ca: 3f:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:C6:0C:EC:F1:6D:17:8E:E2:07:85:D3:24:31:E1:37:40:3E:BC:33 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b42cd78d-c3f1-471a-931a-26eaf5a872f3/1652fdb9-05d0-3c4c-a3f6-1debfcfb924e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b42cd78d-c3f1-471a-931a-26eaf5a872f3/b42cd78d-c3f1-471a-931a-26eaf5a872f3.crl X509v3 Authority Key Identifier: keyid:0A:F3:1E:F6:71:CB:5B:F5:26:03:2D:37:EE:66:DD:C8:8B:6D:54:DF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b42cd78d-c3f1-471a-931a-26eaf5a872f3.cer sbgp-ipAddrBlock: critical IPv4: 23.172.56.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:34:3e:98:c2:9d:2c:21:f2:62:4f:3f:f5:9b:33:05:86:65: 1e:37:7b:48:5b:1f:fc:5f:f3:c3:99:b8:0f:d7:c3:bc:70:4c: 24:d9:c1:ed:56:1c:9d:09:43:36:2e:48:2c:36:f9:9f:82:09: 8c:b3:0c:64:e0:a2:ee:88:17:8d:d3:5e:6b:a1:e9:83:fa:4f: 07:90:5f:7b:0f:ee:48:9e:f1:c7:8e:cf:40:22:8d:c8:3c:2a: 45:cd:b1:a1:93:ca:f6:19:d4:c3:14:a0:c2:2e:30:39:1d:1a: 7d:54:3f:48:7c:4a:6f:8f:02:61:c2:3e:85:cc:b4:8a:b7:5f: 00:56:8f:3b:69:87:be:a2:ed:45:c8:8c:a3:40:68:1a:5c:71: e9:06:97:fa:ef:d3:dc:64:17:d5:fd:29:8d:12:40:18:00:75: 26:cb:1f:b4:66:58:df:6c:eb:98:e5:3f:3a:a6:31:d4:c1:6d: 90:cb:e4:26:5b:e3:17:db:5f:77:c3:b6:d3:08:6d:f5:80:64: cc:82:9c:88:ab:38:ac:b4:e2:d0:d0:d0:27:1c:04:43:fc:08: da:d8:89:06:99:4e:73:82:62:cf:e6:17:82:cb:1d:c3:74:9b: 8e:af:5b:18:17:a3:12:86:dd:70:31:0e:c9:03:ac:96:09:fd: 27:e0:d7:8e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEh18FQEh7PkPihN2gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQyY2Q3OGQtYzNmMS00NzFhLTkzMWEtMjZlYWY1YTg3 MmYzMB4XDTI1MDEwNzAyMDAzOVoXDTI1MDQwNzAxMDAzOVowLzEtMCsGA1UEAxMk N2Q1MzhjNTQtOGY0ZS00MjMxLWEyYjUtMDExZGYxODllNmQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwsFdxeDdbAnV4i8Jd70fnqjsSPvPuIpK+HD1 qnseCnL5bf+ywmjTBzAN+GF56M69oY2euj52Xhj8Q+ogJIwZheua+890328ssQWs sexCHCSSNgXtN2xI6W6p2CcDq8gst4WPvAnQnFY+dFcNrY66sIV2CNd3ZMit55pR sniGwX8VwIS7+5966UU3HHUjRwoqeZGhoXzID0dTKy0sak7kAGVNsR42SMaqV75R r/Kh4WNxZs6vM0YloAwaF3Ihoauz2gOFVk4L+ewugcirl4Fi02s+RrBQJo3ZHNHb UkK2MUJlZlaTkygB/uKRWBGcCaaQwI6FyHxdx/O1lYQhGco/kwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAzGDOzxbReO4geF0yQx4TdAPrwzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9iNDJj ZDc4ZC1jM2YxLTQ3MWEtOTMxYS0yNmVhZjVhODcyZjMvMTY1MmZkYjktMDVkMC0z YzRjLWEzZjYtMWRlYmZjZmI5MjRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYjQyY2Q3OGQtYzNmMS00NzFhLTkz MWEtMjZlYWY1YTg3MmYzL2I0MmNkNzhkLWMzZjEtNDcxYS05MzFhLTI2ZWFmNWE4 NzJmMy5jcmwwHwYDVR0jBBgwFoAUCvMe9nHLW/UmAy037mbdyIttVN8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9iNDJjZDc4ZC1jM2YxLTQ3MWEtOTMxYS0yNmVh ZjVhODcyZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF6w4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHM0PpjCnSwh8mJPP/WbMwWGZR43e0hbH/xf88OZuA/Xw7xwTCTZwe1W HJ0JQzYuSCw2+Z+CCYyzDGTgou6IF43TXmuh6YP6TweQX3sP7kie8ceOz0Aijcg8 KkXNsaGTyvYZ1MMUoMIuMDkdGn1UP0h8Sm+PAmHCPoXMtIq3XwBWjztph76i7UXI jKNAaBpccekGl/rv09xkF9X9KY0SQBgAdSbLH7RmWN9s65jlPzqmMdTBbZDL5CZb 4xfbX3fDttMIbfWAZMyCnIirOKy04tDQ0CccBEP8CNrYiQaZTnOCYs/mF4LLHcN0 m46vWxgXoxKG3XAxDskDrJYJ/Sfg144= -----END CERTIFICATE-----Generated at Sun Feb 16 15:18:29 2025 by rpki-client